Title :

DITTANY: Strength-Based Dynamic Information Flow Analysis Tool for x86 Binaries

Author(s) :

Ghandour, Walid [Auteur]
Self-adaptation for distributed services and large software systems [SPIRALS]
Maurice, Clementine [Auteur]
Self-adaptation for distributed services and large software systems [SPIRALS]

Conference title :

BAR 2022 - Workshop on Binary Analysis Research

City :

San Diego

Country :

Etats-Unis d'Amérique

Start date of the conference :

2022-04-24

English keyword(s) :

dynamic information flow analysis
dynamic slicing
information flow strength
data value prediction
indirect branch prediction
binary analysis

HAL domain(s) :

Informatique [cs]/Cryptographie et sécurité [cs.CR]

English abstract : [en]

Dynamic dependence analysis monitors information flow between instructions in a program at runtime. Strengthbased dynamic dependence analysis quantifies the strength of each dependence chain by a measure computed based on ...
Show more >Dynamic dependence analysis monitors information flow between instructions in a program at runtime. Strengthbased dynamic dependence analysis quantifies the strength of each dependence chain by a measure computed based on the values induced at the source and target of the chain. To the best of our knowledge, there is currently no tool available that implements strength-based dynamic information flow analysis for x86. This paper presents DITTANY, tool support for strength-based dynamic dependence analysis and experimental evidence of its effectiveness on the x86 platform. It involves two main components: 1) a Pin-based profiler that identifies dynamic dependences in a binary executable and records the associated values induced at their sources and targets, and 2) an analysis tool that computes the strengths of the identified dependences using information theoretic and statistical metrics applied on their associated values. We also study the relation between dynamic dependences and measurable information flow, and the usage of zero strength flows to enhance performance. DITTANY is a building block that can be used in different contexts. We show its usage in data value and indirect branch predictions. Future work will use it in countermeasures against transient execution attacks and in the context of approximate computing.Show less >

Language :

Anglais

Peer reviewed article :

Oui

Audience :

Internationale

Popular science :

Non

ANR Project :

ARCHI-SEC: Sécurité au niveau des micro-architectures

Collections :

• Centre de Recherche en Informatique, Signal et Automatique de Lille (CRIStAL) - UMR 9189

Source :

Harvested from HAL